Privacy policy

This is a draft policy describing what BiteSite actually collects and does today. It has not been reviewed by a lawyer and should not be treated as final legal advice — get it reviewed before relying on it for a real launch.

Terms of service · Refund policy

What we collect

• Account details: name, email address, and password (stored only as a salted hash, never in plain text). Phone number and roll number are optional and used only if you provide them.
• Order data: what you order, from which canteen, when, and its status through preparation and pickup.
• Payment data: we never see or store your card, UPI, or bank details. Payments are processed by Razorpay; we keep only the order amount, Razorpay's order/payment reference IDs, and the payment status they report back to us.
• Support requests: the subject and message of any grievance you raise, and the canteen's response.
• Operational logs: who changed what (e.g. menu prices, order status) and when, kept for accountability and fraud investigation.

Why we collect it

Solely to run the canteen pre-ordering service: authenticate you, route your order to the right canteen, confirm payment before it enters the kitchen queue, let the canteen staff prepare and hand it over, and let you raise and track support issues.

Who we share it with

Your college's canteen staff can see orders placed at their outlet. Razorpay processes payments on our behalf under their own privacy policy. We do not sell or share your data with anyone else.

How long we keep it

For as long as your account is active. Order and payment records are kept afterward for the canteen's legitimate accounting needs, but with identifying details removed if you delete your account (see below).

Your rights

You can view your account details and delete your account at any time from My account. Deleting your account removes your name, email, phone, and roll number and signs you out immediately. Your order and payment history is kept, stripped of anything that identifies you, because the canteen has a legitimate operational and accounting need to keep those records. This reflects the approach expected under India's Digital Personal Data Protection Act, 2025 — get it legally reviewed before treating it as compliant.

Contact

Questions about this policy or your data can be raised through the in-app support form (Support) or directly with your college's BiteSite administrator.